e3a797f1894f353b62e9fd9e0157b44956e88f0a1a8a17ca784fbc4057a7f0f6

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 04:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-19_c09936f9829bf793eb0b2ee1952636ed_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 18.6MB
Sample260819-e4tcgadn4v
SHA256 e3a797f1894f353b62e9fd9e0157b44956e88f0a1a8a17ca784fbc4057a7f0f6
MD5 c09936f9829bf793eb0b2ee1952636ed
SHA1 ed2884617cac5ccb1b533b432cf5943310ff1fed
SHA512 950a6d92b0f0ba617534cabb2c55b7a24707fd9c3bca154449c07bda0c4af6730b2f5e6c4fcd17aa960c57603e8a66f746edb15a2bc7ad0e1e72e17399d132ab
SSDEEP 98304:XA66lJ+xuvICUu3wM97/Ck+AdUbhRuL0Ylw0JjdLLwOk9okTBcQW6prxAzTuVEqZ:JugCUBuKVuLHl4njSB4ZB
TLSH
T166173C06765F98ECD49AC874830B8A635E2034DB1B26B9FF50C442393F6EBE46B39715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
13	raw.githubusercontent.com
6	raw.githubusercontent.com

C:\Users\Admin\AppData\Local\Temp\2026-08-19_c09936f9829bf793eb0b2ee1952636ed_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_c09936f9829bf793eb0b2ee1952636ed_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
PID:2504

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.json

Path C:\Users\Admin\AppData\Roaming\tokmesh\settings.json
Size 1KB
SHA256 20c496634ffa68efbd63cfe5f36fcfcc415613fc2caf1915fd7416c429899cad
MD5 70a8990810b4b90615b0b91f022c31ec
SHA1 0d87900046a5a7935b6084d6e2892f7d934ef0a4
SHA512 bedc99ec2d993d926b9795ef640deaa6fe216cbf27abe53ec6062226d164672e73f4fabd909dda8b855c4d2e8525ebcff2423479088942d622b567d0e1103825
TLSH
T194216221C6201EF907D1693D88A882835355C5534F4A3C68B699492C2F4EF3D26F6FD7
MD5 SHA1 SHA512 TLSH

Submit Download